The crypto module provides cryptographic functionality for hashing, encryption, and secure random numbers.
Hashing#
Loading code block...
Password Hashing#
Loading code block...
Symmetric Encryption#
Loading code block...
HMAC#
Loading code block...
Random Values#
Loading code block...
Key Derivation#
Loading code block...
Digital Signatures#
Loading code block...
Practical Examples#
Loading code block...
Best Practices#
Algorithms:
✓ Use scrypt or Argon2 for passwords
✓ Use AES-256-GCM for encryption
✓ Use SHA-256 or SHA-512 for hashing
✓ Use HMAC for message authentication
Security:
✓ Use crypto.randomBytes for tokens
✓ Use timing-safe comparison
✓ Generate unique IVs/salts
✓ Store salts with hashes
Key Management:
✓ Use environment variables
✓ Rotate keys periodically
✓ Use key derivation functions
✓ Never hardcode secrets
Avoid:
✗ MD5 or SHA1 for security
✗ ECB mode for encryption
✗ Predictable IVs or salts
✗ Rolling your own crypto
Conclusion#
The Node.js crypto module provides comprehensive cryptographic functionality. Use scrypt for password hashing, AES-GCM for encryption, and HMAC for authentication. Always use secure random generation for tokens and keys. Follow best practices for algorithm selection and key management.